Serendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter.
s9y serendipity 2.0.4